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CLAIMS 

What is claimed is: 

1 . A method comprising: 

determining whether a predetermined policy followed by a first virtual 
local area network (VLAN) is supported by a port of a networking device; 

disallowing the port membership to the first VLAN if the port fails to support 
the predetermined policy; and 

allowing the port membership to the first VLAN if the port fails to support the 
predetermined policy and the port constitutes a tag-only port. 

2. The method of claim 1 further comprising: 

disallowing the port membership to the first VLAN if the port supports the 
predetermined policy and is a current member of a second VLAN following the 
predetermined policy. 

3. The method of claim 2 further comprising: 

allowing the port membership to the first VLAN if the port supports the 
predetermined policy and is not a current member of a second VLAN following the 
predetermined policy. 

4. The method of claim 1, wherein the predetermined policy is associated 
with untagged frames. 

5. The method of claim 1 further comprising: 

determining whether a change of a tagging option of the port is requested; and 
allowing the change in the tagging option from an untagged state to a tagged 

state. 
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1 6. The method of claim 5 further comprising: 

2 disallowing the change in the tagging option if the change in the tagging 

3 option is from the tagged state to the untagged state and the port is a member of a 

4 second VLAN following the predetermined policy. 

1 7. The method of claim 6 further comprising: 

2 allowing the change in the tagging option if the change in the tagging option is 
2 3 from the tagged state to the untagged state and the port is not a member of the second 
JLj 4 VLAN following the predetermined policy. 

w 3 

|j 1 8. The method of claim 1 further comprising: 

^ 2 determining whether a change of a filtering option of the port is requested; and 

P 3 allowing the change in the filtering option from a "Do Not Filter" state to a 

[I 4 "Do Filter" state. 

w 1 9. The method of claim 8 further comprising: 

2 disallowing the change in the filtering option if the change in the filtering 

3 option is from the "Do Filter" state to the "Do Not Filter" state and the port is a 

4 member of a second VLAN following the predetermined policy. 

1 10. The method of claim 9 further comprising: 

2 allowing the change in the filtering option if the change in the filtering option 

3 is from the "Do Filter" state to the "Do Not Filter" state and the port is not a member 

4 of the second VLAN following the predetermined policy. 

1 1 1 . A method comprising: 

2 determining whether a selected port is a tag-only port; 

3 allowing membership of the port to a first virtual local area network 

4 (VLAN) if the selected port is a tag-only port; 

003239.P080 Patent Application 

Express Mail No. EL466332389US 



+ 



1 2075B AUSO 1 U/ 1 2076B AUSO 1U 



-13- 



5 
6 
7 
8 
9 
10 
11 
12 

JSCS. 

tS 

S 1 
B 2 

«» 4 

3! 

M 1 

5 2 
i 

2 
3 
4 

1 
2 
3 
4 



determining whether a predetermined policy followed by the first VLAN is 
supported by a port of a networking device; 

disallowing the port membership to the first VLAN if the port fails to support 
the predetermined policy and the selected port is a member of a second VLAN 
following the predetermined policy; and 

allowing the port membership to the first VLAN if the port supports the 
predetermined policy and the selected port is not a member of the second VLAN 
following the predetermined policy. 

12. The method of claim 1 1 further comprising: 
disallowing the port membership to the first VLAN if the port supports the 
predetermined policy and the selected port is a member of the second VLAN 
following the predetermined policy. 

13. The method of claim 1 1 , wherein the predetermined policy is 
associated with untagged frames. 

14. The method of claim 1 1 further comprising: 

determining whether a change of a tagging option of the port is requested; and 
allowing the change in the tagging option from an untagged state to a tagged 



15. The method of claim 14 further comprising: 

disallowing the change in the tagging option if the change in the tagging 
option is from the tagged state to the untagged state and the port is a member of a 
second VLAN following the predetermined policy. 
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16. The method of claim 14 further comprising: 

disallowing the change in the tagging option if the change in the tagging 
option is from the tagged state to the untagged state and the port is a member of the 
second VLAN following the predetermined policy. 

17. The method of claim 14 further comprising: 

disallowing the change in the tagging option if the change in the tagging option is 
from the tagged state to the untagged state and the port is a member of the second 
VLAN following the predetermined policy. 

18. The method of claim 8 further comprising: 

disallowing the change in the filtering option if (i) the change in the filtering 
option is from the "Do Filter" state to the "Do Not Filter" state, (ii) the port is a 
member of a VLAN having a policy that fails to support untagged frames, and (iii) the 
port is a member of a second VLAN following the predetermined policy. 

19. A networking device comprising: 
a plurality of ports; and 

a processing unit to control membership of at least one of the plurality of 
ports to a policy-based virtual local area network (VLAN), the processing unit to 
determine whether a predetermined policy followed by the policy-based VLAN is 
supported by the at least one of the plurality of ports, and to allow the at least one 
port of the plurality of ports membership to the policy-based VLAN if the at least 
one port fails to support the predetermined policy and constitutes a tag-only port. 

20. The networking device of claim 19, wherein the processing unit 
further disallows the at least one port of the plurality of ports membership to the 
policy-based VLAN if the at least one port fails to support the predetermined 
policy. 
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2 1 . The networking device of claim 20, wherein the processing unit further 
disallows membership to the policy-based VLAN if the port supports the 
predetermined policy and is also a current member of another VLAN following the 
predetermined policy. 

22. The networking device of claim 21, wherein the predetermined policy 
is associated with untagged frames. 

23. The networking device of claim 19, wherein the processing unit further 
determines whether a change of a tagging option of the at least one port is requested 
and allows the change in the tagging option if the tagging option is changed from an 
untagged state to a tagged state. 

24. The networking device of claim 23, wherein the processing unit further 
disallows the change in the tagging option if the change in the tagging option is from 
the tagged state to the untagged state and the at least one port is a member of another 
VLAN following the predetermined policy. 

25. A program loaded in memory of a networking device for execution 
therein, the program comprising: 

a first subprogram to determine whether a predetermined policy followed 
by the policy-based VLAN is supported by a port of a networking device; 

a second subprogram to disallow the at least one port of the plurality of ports 
membership to the policy-based VLAN if the at least one port fails to support the 
predetermined policy; and 

a third subprogram to allow the at least one port of the plurality of ports 
membership to the policy-based VLAN if the at least one port fails to support the 
predetermined policy and constitutes a tag-only port. 
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